thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

OpenID Connect (OIDC)

Identity layer on top of OAuth 2.0 that authenticates users and returns an ID token.

Definition

OIDC adds the openid scope, a signed ID token (JWT) describing the authenticated user, a UserInfo endpoint, and discovery metadata. It is the modern standard for web and mobile SSO and is used by Microsoft Entra ID, Google, Okta, and others. It is lighter than SAML and suits APIs and mobile apps.

Example

A 'Sign in with Google' button uses OIDC to return an ID token with the user's email and subject identifier.

Exam tip

OIDC = authentication on OAuth; ID token proves who the user is, access token grants API access.

Don't confuse it with

Related terms